Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
File: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer (raw, json)
Hash identifier: 1KB9pOTsCpPcdIvJcMlfqos+MiC/tAGzxgUIgHFK22o=
Subject key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190ABB6BB3C58C4F534DEB3E3903C9B8569
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 13 Jul 2024 10:49:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2a14:400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ab:b6:bb:3c:58:c4:f5:34:de:b3:e3:90:3c:9b:85:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 13 10:49:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:24:6e:a7:ec:6d:11:b8:75:c8:8a:3d:9b:
8c:5e:59:eb:60:f8:fa:b1:03:49:e4:7e:cf:4b:c8:
a1:06:a5:79:d6:6b:a4:76:1d:43:99:f5:b4:45:de:
b3:e4:b7:d5:df:00:2c:59:3d:18:c5:51:f5:6a:a2:
dd:a1:02:aa:96:e1:34:e4:aa:45:05:fc:8a:7f:a7:
9f:69:7c:10:7c:9d:f1:d2:df:11:e8:73:94:ea:67:
ca:fd:8a:17:8c:6d:f1:af:23:eb:5f:75:42:3b:40:
fa:cf:0c:ef:a0:02:7a:74:68:7e:25:e1:b9:87:65:
d1:6e:31:73:44:d4:cb:3d:cd:69:27:99:3f:83:ab:
1d:4c:a2:c0:9a:f1:7d:f0:59:81:44:58:ef:bc:13:
3f:41:aa:37:17:7f:e8:b5:38:e8:75:6c:ee:bb:c1:
81:8e:c4:07:9e:69:f0:92:d6:31:3f:df:01:12:f9:
b1:2a:5e:f6:b9:dc:c1:14:f1:5f:80:dd:c9:61:91:
bf:a3:20:29:70:ca:46:6f:9e:93:2f:fc:58:2e:2d:
23:65:41:8b:48:1c:6e:40:58:10:53:60:a0:e0:60:
79:d7:0b:7e:08:64:29:7d:6b:ab:fc:a5:ca:14:72:
93:4c:6f:42:90:ad:ba:92:f2:eb:d2:fc:2c:6d:b9:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:400::/29
Signature Algorithm: sha256WithRSAEncryption
a4:7f:ec:27:12:3c:3a:53:29:aa:83:c7:5d:fd:9a:23:ce:ae:
ae:73:50:81:8c:c4:0c:73:74:76:d9:90:e4:58:49:ae:36:71:
f9:55:d2:78:a0:5c:d8:ab:fb:d6:56:6e:c0:7a:d0:2c:8d:4e:
e5:e7:e0:94:17:09:ff:a2:c1:e4:01:ef:b3:ed:d8:da:0e:ea:
cd:6e:61:de:62:59:f5:5f:d4:65:7d:f7:5a:cc:98:49:d9:4c:
c5:bc:db:a1:ee:88:f7:8d:17:6f:79:9a:84:20:bf:e8:28:ec:
48:56:48:37:30:0e:bb:90:10:e7:d3:be:b9:29:60:08:34:cb:
71:32:b7:c2:d1:4e:8c:12:8b:b5:58:82:28:7d:f2:58:5c:3a:
d4:59:f6:a3:3f:e2:ca:9f:c6:7c:49:43:6a:83:7d:29:63:f0:
5a:cd:f8:3f:99:a6:50:43:16:92:cb:63:e6:df:e9:92:bb:eb:
0f:96:10:ea:1f:bf:66:55:59:e8:9f:f3:9b:0e:0c:8f:86:87:
02:26:3a:9a:f5:fa:a9:5f:69:40:27:d4:6c:79:be:73:0c:8d:
e4:45:83:98:e6:c5:58:23:9b:7d:63:fc:fb:18:ea:75:2f:79:
69:37:c5:99:8e:21:11:b2:d5:d1:da:5f:be:a2:41:07:2b:7e:
9a:43:7f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:15:02 2024 by rpki-client on console-fra.rpki-client.org